Project CSP Leader - Bengaluru/Bangalore @ Alstom

Responsibilities

The Cybersecurity platform (CSP) is a hub of centralized cyber security functions and services, running in a virtualized environment, for urban mass transit train transportation systems.

The role of the cybersecurity CSP Leader is to design and execute cybersecurity platform activities for projects. Three types of missions are representative of the role:

• Adapt, manage and deploy a Cybersecurity platform (CSP) on international metro and mainline projects

• Contribute to project security conditions

• Contribute to CSP architecture definitions and evolutions

The following activities will be a part of the job responsibilities

• Participate in the instantiation of the infrastructure, architecture and design principles of CSP to deploy services for Identity and Access Management (IAM), Certificate Management (PKI), Malware protection, Privilege access management, Security event management, Intrusion detection, Patch management, NTP, etc. in a virtual environment.

• Adapt the cybersecurity products of the CSP platform to the cybersecurity requirements of projects (project-specific constraints, local regulations, imposed standards)

• Manage application deployment, configuration and integration activities of the CSP platform.

• Develop and document action plans to bring projects into compliance with the CSP platform

• Provide organizational and technical interfaces with other Alstom teams and subsystems.

• Manage and monitor users of Cybersecurity services who work on projects.

• Contribute to penetration testing campaigns for activities which involve the CSP.

• Develop test and validation procedures for modules specific to CSP

• Specify, implement and test security modules that are not part of the generic CSP Platform

• Develop and document operational conditioning action plans.

• Contribute to the training of Customers in the implementation of cybersecurity in Operations mode

Key Job Authorities and Dimensions

• Responsible of the QCD of its project Cybersecurity CSP Work Package

• Functional animation of Cybersecurity Engineer team (typically from 1 to 3)

Performance measurements:

• Quality of CSP design and deliverables, in time

• Achievement of Project targeted level of compliance

• Assessment findings: Low rework due to external or internal assessments

Educational Requirments

Minimum:

University/ Engineer in degree level

Preferred:

Cybersecurity certification

Experience

Minimum :

• Experience with direct responsibility for hands on architecture, design, development of IT products for cyber applications.

• Experience related to deployment of security software s in IT environment

Preferred:

• Knowledge of Alstom Products Solution Portfolio

• Experience in embedded or industrial systems (railway / aeronautics ...)

Competency and Skills

• Technical Background with 12+ years of experience in IT architecture role with exposure to security concepts.

• Previous hands on experience in an IT/OT environment with architecture/design, configuration, deployment and management of modules such as

• Active Directory (group policies, domain controllers, etc.)

• Antivirus solutions (orchestrator, whitelisting, virus scan)

• Syslog solutions

• Certificate Management (PKI)

• Patch Management solutions

• Backup solutions

• LDAP, TACACS Radius/AAA

• Windows servers, hardware for high availability, OS management

• Strong in virtualization concepts and technologies (e.g Vmware, HyperV, Citrix, etc)

• Knowledge of scripting (PowerShell / Python )

• Knowledge of some Cybersecurity areas (authentication, network access control, intrusion detection, etc.)

• Architecture concepts and techniques of systems and networks, operating systems and associated programming languages.

• Knowledge of security products and protocols

• Strong documentation (written) and presentation (verbal) skills

• Ability to communicate effectively with internal and external stakeholders.

• Dynamic, autonomous. Creativity and ability to work in a complex environment.